Hackers target school app used by several local districts to send inappropriate images

PO1 William "Chip" Nagel
..."*What You Should Do*

- Maintaining the security of Seesaw accounts is paramount. While we work to proactively prevent these kinds of attacks, you can help by making sure that all user accounts use unique passwords that are not used in other services.

- If you are an administrator, we will be sharing an email template to let your parents and teachers know:

- Seesaw was not compromised; however, isolated individual user accounts were compromised and used to send an inappropriate message.

- This incident was the result of an outside actor; the messages were not created by the sender.

- If your account was compromised, your password was reset and you have already received an email notifying you of this.

- It is essential that you always use best practices to ensure your password is secure.

- Seesaw takes protecting your security and privacy seriously and we have a number of measures in place to protect the integrity of your information. You can learn more here. * Next Steps*

- We will re-enable messaging when we’ve confirmed that the inappropriate message is no longer accessible from our servers.

- We are actively monitoring the situation and will be putting additional mitigation measures in place to prevent this and future attacks of this type.

- We will be scanning databases of known compromised passwords and resetting the passwords of users who may have re-used passwords as a proactive additional security measure (and preventing use of these passwords in the future).

- Please always use a unique password for accessing Seesaw and any other online account or service. Never reuse an old password or use the same password. Consider using a password manager for added security."

IT security is critical. Unfortunately, we haven't been very good at it